Description:

Security-enhanced Linux is a patch of the Linux kernel and a number of
utilities with enhanced security functionality designed to add
mandatory access
controls to Linux. The Security-enhanced Linux kernel contains new
architectural components originally developed to improve
the security of the Flask
operating system. These architectural components provide
general support for the
enforcement of many kinds of mandatory access control policies,
including those
based on the concepts of Type Enforcement, Role-based Access Control, and
Multi-level Security.

The tools and libraries in this release include:

1. apol: The GUI-based policy analysis tool.

2. awish: A version of the TCL/TK wish interpreter that includes the
setools libraries. We use this to test our GUIs (apol have the
interpreter compiled within them). One could conceivably write one's own
GUI tools using TCL/TK as extended via awish.

See the help files for apol for help on using the
tools.